CVE-2017-1000452

An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate…

published January 2, 2018

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01380 · 71.9th percentile
Published
2018-01-02T17:00Z
EPSS history
Timeline
  • 02 JAN 17:00Z
    An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate…
    cvelistv5